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DETAILED ACTION 

1 Claims 33 - 36 and 71 - 75 have been canceled; claims 14 and 20 have been 
amended in an amendment filed 8/23/2005. Claims 1 - 7, 10 - 32 and 37 - 70 have 
been examined. 

Response to Arguments 

2. Applicant's arguments filed on 8/23/2005 with respect to the subject matter of the 
instant claims have been fully considered and the new grounds of rejections has been 
made. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

A person shall be entitled to a patent unless - 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

3. Claims 1 - 7, 14, 20, 22 - 24 and 45 - 54 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Farber et al. (hereinafter, "Farber" - PN: 6415280), in view of 
Malcolm et al. (hereinafter, "Malcolm" - PN: 2002/0004917). 
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As per claim 1,14 and 20, Farber discloses a network system comprising: 

a first device to maintain an original resource (Farber: Column 43 Line 59 - 61 ); 

a second device to maintain a replica resource remotely from the first device, the 

replica resource being replicated from the original resource (Farber: Column 43 Line 59 

-61); 

memory to store a cached descriptor corresponding to the original resource 
(Farber: Column 12 Line 38 - 43, Column 3 Line 56 - 57, Column 39 Line 24 - 25 and 
Figure 1(b): Farber teaches that a "True Name" of a data item (for example, files, 
database records and the like) obtained by computing a MD, or a hash function, is 
virtually guaranteed to represent the given data item and only that particular data item. 
Therefore, a True Name is qualified as a Descriptor and both of them are served as 
resource unique identifiers; especially, for object integrity validation purpose - This 
matches the Descriptor defined by the Applicant which can be a hash function of the 
resource, a calculated checksum (CRC) or any other functional identifier that can be 
formulated to provide a basis for comparison of different instantiations of a resource). 
However, Farber does not disclose expressly the "cache descriptor". 

Malcolm teaches cache descriptor (Malcolm: Para [0037], Para [0052] Line 1 - 2, 
Para [0054] Line 1 - 2, Para [0059] Line 10 and Para [0080] Line 1 - 3). 

It would have been obvious to a person of ordinary skill in the art at the time the 
invention was made to combine the teaching of Malcolm within the system of Farber 
because Malcolm teaches providing a cache engine to improve performance that allows 
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the client devices relatively quicker access to network objects (Malcolm: see for 
example, Para [0036] and Para [0037]). 

Accordingly, Farber as modified further teaches: 

a security component to determine whether the replica resource will pose a 
security risk to the second device (Farber: Column 31 Line 26 - 30 and Column 34 Line 
45 " 62) upon receipt of a request for the replica resource, wherein the request 
designates a resource locator (Malcolm: Para [0068] and [0077]), the security 
component: 

being configured to determine whether the request will pose a security risk to the 
second device (Farber: Column 31 Line 26 - 30 and Column 34 Line 45 - 62); 

formulating a descriptor corresponding to the replica resource and comparing the 
formulated descriptor with the cached descriptor (Malcolm: Para [0042] and Para 
[0077]; Farber: Column 31 Line 26 - 30 and Column 34 Line 45 - 62: This is considered 
to be inherent as the only way to verify the true object by using the given True Name 
(i.e. Object Descriptor) for resource integrity validation). 

if the formulated descriptor and the cached descriptor are not equivalent, 
formulating a second descriptor corresponding to the original resource and comparing 
the formulated descriptor with the second descriptor (Farber: Column 12 Line 38 - 43; 
Malcolm: Para [0042] and Para [0105]: Malcolm teaches replacing a network object 
associated with a mirror site with the original resource object (if modified), all the way up 
following the tree structure to the root object (Para [0105]) and formulating the second 
descriptor is evidently the only way to detect the changes of objects in conjunction with 
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the tree structure to the root object of the original resource as taught by Farber in view 
of Malcolm). 

As per claim 2, Farber as modified further teaches the security component 
determines that the replica resource is not a security risk if the formulated descriptor 
and the cached descriptor are equivalent (Farber: Column 31 Line 26 - 30 and Column 
34 Line 45-62). 

As per claim 3, Farber as modified if the formulated descriptor and the cached 
descriptor are not equivalent, and if the formulated descriptor and the second descriptor 
are equivalent, the security component determines that the replica resource is not a 
security risk (Farber: Column 31 Line 26 - 30 and Column 34 Line 45 - 62: Farber 
teaches integrity checked for security purpose, for instance, to check for virus). 

As per claim 4, Farber as modified if the formulated descriptor and the cached 
descriptor are not equivalent, and if the formulated descriptor and the second descriptor 
are equivalent, the security component determines that the replica resource is not a 
security risk, and the cached descriptor is replaced with the second descriptor (Farber: 
Column 25 Line 57 - 61 and Column 37 Line 13-17; Malcolm: Para [0037], Para 
[0052] Line 1 -2, Para [0054] Line 1 -2, Para [0059] Line 10 and Para [0080] Line 1 - 
3: the resource is replaced according to the resource tree structure and thereby the 
object descriptor is also replaced accordingly for quicker access (Para [0037])). 
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As per claim 5, Farber as modified further teaches if the formulated descriptor 
and the cached descriptor are not equivalent, and if the formulated descriptor and the 
second descriptor are not equivalent, the security component determines that the 
replica resource is a security risk, and the replica resource is replaced with a copy of the 
original resource (Farber: Column 25 Line 57 - 61 and Column 37 Line 13-17; 
Malcolm: Para [0037], Para [0052] Line 1 - 2, Para [0054] Line 1 - 2, Para [0059] Line 
10 and Para [0080] Line 1-3: the resource is replaced according to the resource tree 
structure). 

As per claim 6, Farber as modified further teaches if the formulated descriptor 
and the cached descriptor are not equivalent, and if the formulated descriptor and the 
second descriptor are; not equivalent, the security component determines that the 
replica resource is a security risk, the replica resource is replaced with a copy of the 
original resource, and the cached descriptor is replaced with the second descriptor 
(Farber: Column 25 Line 57 - 61 and Column 37 Line 13-17; Malcolm: Para [0037], 
Para [0052] Line 1 - 2, Para [0054] Line 1 - 2, Para [0059] Line 10 and Para [0080] 
Line 1 - 3: the resource is replaced according to the resource tree structure and thereby 
the object descriptor is also replaced accordingly for quicker access (Para [0037])). 

As per claim 7, Farber as modified further teaches the security component 
formulates the cached descriptor when the original resource is replicated to create the 
replica resource (Farber: Column 25 Line 57-61 and Column 37 Line 13-17; 
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Malcolm: Para [0037], Para [0042], Para [0052] Line 1 - 2, Para [0054] Line 1 - 2, Para 
[0059] Line 10 and Para [0080] Line 1 - 3: the resource is replaced according to the 
resource tree structure and thereby the object descriptor is also replaced accordingly for 
quicker access (Para [0037])). 

As per claim 22 - 24, claims 22 - 24 do not further teach over claims 2 - 7 as 
addressed above. 

As per claim 45 - 54, claims 45 - 54 do not further teach over claims 1 - 7 as 
addressed above. 

4. Claims 15 and 21 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Farber et al. (hereinafter, Tarber'' - PN: US 6415280 B1 ), in view of Malcolm et al. 
(hereinafter, "Malcolm" - PN: 2002/0004917), and in view of Brothers (hereinafter, 
"Brothers" - PN: US 2002/0083178). 

As per claim 15 and 21 , Farber does not teach if the security component 
determines that the request will pose a security risk, the security component redirects 
the request to indicate; that the resource is not available. 

Brothers teaches if the security component determines that the request will pose 
a security risk, the security component redirects the request to indicate; that the 
resource is not available (Brothers, Page 8, 4**^ Para - File "not found"). 
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It would have been obvious to a person of ordinary skill in the art at the time the 
invention was made to combine the teaching of Brothers within the system of Farber as 
modified because Brothers teaches providing a system of secure content on an HTTP 
URL distribution infrastructure that allows the clients / users to access the data content 
from a network web server or its associated cache server (Brothers (provisional): page 
1 2"*^ Para Line 1 - 4) in a way that limited access data to be published into a 
distribution network while still ensuring that only a limited users is able and authorized to 
view the content (Brothers (Provisional): see for example, Column 1 Line 5-10). 

5. Claims 25 - 29, 37 - 41 , 61 - 65 and 69 are rejected under 35 U.S.C. 1 03(a) as 
being unpatentable over Farber et al. (hereinafter, "Farber'' - PN: US 6415280 B1), in 
view of Brothers (hereinafter, "Brothers" - PN: US 2002/0083178), and in view of 
Rosenthal (hereinafter, "Rosenthal " - PN: 5359659). 

As per claim 25, Farber teaches a network server, comprising: 
an Internet server to receive a request for a resource maintained on the network 
server and, in response to the request, implement security policies to prevent 
unauthorized access to the resource (Farber: Column 43 Line 59 - 61 , Column 12 Line 
38 - 43, Column 3 Line 56 - 57, Column 39 Line 24 - 25 and Figure 1 (b)). 

a security component that is registerable with the Internet server during run-time 
(Farber: Column 23 Line 14-44: the RPC (Remote Procedure Call) is inherently 
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assured that the client must be registered with the server system during the run-time 
first before the further communications can really start), the security component having: 

an integrity verification component to determine whether the resource will pose a 
security risk to the network server upon receipt of the request (Farber: Column 31 Line 
26 " 30 and Column 34 Line 45 - 62). 

However, Farber does not teach a validation component to determine whether 
the request will pose a security risk to the network server if a total number of characters 
defining ail of the arguments do not exceed a maximum number of characters. 

Brothers teaches the request designates a resource locator having a resource 
path, the resource path identifying a location of the replica resource, and wherein the 
security component determines that the request is not a security risk if the resource 
path is well formatted (Provisional of Brothers, page 8, 1®^ Para and Page 8 4*^ Para). 
Brother further teaches a security module "Rights Management Enforcer'' performs the 
following security checks: 

• (a) Rights Management Enforcer entity validates the request for resource is 
authorized or not (Provisional of Brothers: page 2, 2"*^ Para Line 4 - 7). 

• (b) Rights Management Enforcer entity as taught by Brothers (provisional) is 
responsible for validating a HTTP request that uses a secure URL, 
determines if the secure URL is properly formatted (Brothers (provisional): 
Page 8, 1^* Para). Examiner notes "properly formatted" must include (i) 
qualified characters and (ii) right length. Official Notice it is also well known 
URLs typically have a maximum length of two hundred and fifty-six (256) 
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characters - please referred to Rollins (PN: 2002/0103712, Para [0087]). 
Thereby, each field (arguments) of secure URL, including the resource path 
as one of parameters / arguments, should not exceed 256 characters; 
otherwise, it becomes improperly formatted and violates the rule of secure 
URL as imposed by Rights Management Enforcer entity as taught by Brothers 
provisional (Brothers Provisional: page 8, 1®* Para). With respect to the valid 
file extension, Brother (provisional) teaches Rights Management Enforcer 
evaluates the secure URL including how various fields are encoded (Brothers 
Provisional: page 7, Bullet of Format Field) and the "Formatted Path" of a 
URL is disclosed including "file.ext" (i.e. file extension) (Brothers Provisional: 
page 4, 2"^ Para). 

• (c) If the secure URL is determined to be invalid, it may send various status 
responses, for example "forbidden" (interpreted as posing security risk) 
(Brothers Provisional: Page 8 4*^ Para). 
However, Brothers (provisional) does not disclose expressly that the security 
component determines that the request is not a security risk if a total number of 
characters defining all of the arguments do not exceed a maximum number of 
characters. 

Rollins teaches a URL typically has a maximum length of 256 characters (Rollins: 
Para [0087]). 

It would have been obvious to a person of ordinary skill in the art at the time the 
invention was made to combine the teaching of Rollins within the system of Farber as 
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modified because Rollins teaches an internet Integrated Order Mechanism proxy that 
allows clients to enter URL of product search page and first go to lOM proxy secure 
communications between participants in a flexible manner similar to the proxying 
approach using relative URL instead of absolute UR (Rollins: see for example, Para 
[0074] and [0071]). 

As per claim 28, Farber as modified further teaches the request designates a 
resource locator having a resource identifier, and wherein the security component 
determines that the request is not a security risk if the resource identifier has a valid file 
extension (Brother (provisional): page 7, Bullet of Format Field and page 4, 2"^ Para: 
Brothers teaches Rights Management Enforcer evaluates the secure URL including how 
various fields are encoded (Brothers Provisional: page 7, Bullet of Format Field) and the 
"Formatted Path" of a URL is disclosed including "file.exf (i.e. file extension) (Brothers 
Provisional: page 4, 2"^ Para). 

As per claim 26, 27 and 29, claims 26, 27 and 29 do not further teach over claims 
25 and 28 as addressed above. 

As per claim 37 - 41 , claims 37 - 41 do not further teach over claims 25 and 28 
as addressed above. 
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As per claim 61 - 65, claims 61 - 65 do not further teach over claims 25 and 28 
as addressed above. 

As per claim 69, the claim recites computer-readable medium comprising 
computer executable instructions that, when executed, direct a computing system to 
perform the method of claim 61 (Farber: Figure 1(a)). 

6. Claims 10 -13, 16- 19 and 55-60 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Farber et al. (hereinafter, "Farber" - PN: US 641 5280 B1 ), in 
view of Malcolm et al. (hereinafter, "Malcolm" - PN: 2002/0004917), in view of Brothers 
(hereinafter, "Brothers" - PN: US 2002/0083178), and in view of Rosenthal (hereinafter, 
"Rosenthal " - PN: 5359659). 

As per claim 10, Farber as modified does not teach the request designates the 
resource locator having a resource path, the resource path identifying a location of the 
replica resource, and wherein the security component determines that the request is not 
a security risk if the resource path does not exceed a maximum number of characters. 

However, Farber does not teach a validation component to determine whether 
the request will pose a security risk to the network server if a total number of characters 
defining all of the arguments do not exceed a maximum number of characters. 

Brothers teaches the request designates a resource locator having a resource 
path, the resource path identifying a location of the replica resource, and wherein the 
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security component determines that the request is not a security risk if the resource 
path is well formatted (Provisional of Brothers, page 8, 1®* Para and Page 8 4*^ Para). 
Brother further teaches a security module "Rights Management Enforcer" performs the 
following security checks: 

• (a) Rights Management Enforcer entity validates the request for resource is 
authorized or not (Provisional of Brothers: page 2, 2"^ Para Line 4 - 7). 

• (b) Rights Management Enforcer entity as taught by Brothers (provisional) is 
responsible for validating a HTTP request that uses a secure URL, 
determines if the secure URL is properly formatted (Brothers (provisional): 
Page 8, 1^* Para). Examiner notes "properly formatted" must include (i) 
qualified characters and (ii) right length. Official Notice it is also well known 
URLs typically have a maximum length of two hundred and fifty-six (256) 
characters - please referred to Rollins (PN: 2002/0103712, Para [0087]). 
Thereby, each field (arguments) of secure URL, including the resource path 
as one of parameters / arguments, should not exceed 256 characters; 
otherwise, it becomes improperly formatted and violates the rule of secure 
URL as imposed by Rights Management Enforcer entity as taught by Brothers 
provisional (Brothers Provisional: page 8, 1^^ Para). With respect to the valid 
file extension, Brother (provisional) teaches Rights Management Enforcer 
evaluates the secure URL including how various fields are encoded (Brothers 
Provisional: page 7, Bullet of Format Field) and the "Formatted Path" of a 
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URL is disclosed including "file.ext" (i.e. file extension) (Brothers Provisional: 
page 4, 2"^ Para). 

• (c) If the secure URL is determined to be invalid, it may send various status 
responses, for example "forbidden" (interpreted as posing security risk) 
(Brothers Provisional: Page 8 4*^ Para). 
However, Brothers (provisional) does not disclose expressly that the security 
component determines that the request is not a security risk if a total number of 
characters defining all of the arguments do not exceed a maximum number of 
characters. 

Rollins teaches a URL typically has a maximum length of 256 characters (Rollins: 
Para [0087]). 

It would have been obvious to a person of ordinary skill in the art at the time the 
invention was made to combine the teaching of Rollins within the system of Farber as 
modified because Rollins teaches an internet Integrated Order Mechanism proxy that 
allows clients to enter URL of product search page and first go to lOM proxy secure 
communications between participants in a flexible manner similar to the proxying 
approach using relative URL instead of absolute UR (Rollins: see for example. Para 
[0074] and [0071]). 

As per claim 12, Farber as modified does not teach the request designates the 
resource locator having a resource identifier, and wherein the security component 
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determines that the request is not a security risk if the resource identifier has a valid file 
extension. 

Brother teaches the request designates the resource locator having a resource 
identifier, and wherein the security component determines that the request is not a 
security risk if the resource identifier has a valid file extension (Brother (provisional): 
page 7, Bullet of Format Field and page 4, 2"^ Para: Brothers teaches Rights 
Management Enforcer evaluates the secure URL including how various fields are 
encoded (Brothers Provisional: page 7, Bullet of Format Field) and the "Formatted Path" 
of a URL is disclosed including "file.ext" (i.e. file extension) (Brothers Provisional: page 
4, 2"^^ Para). Same rationale of combination applies here as above in rejecting the claim 
10. 

As per claim 1 1 and 13, claims 1 1 and 13do not further teach over claims 10 and 
12 as addressed above. 

As per claim 16-19, claims 1 6 - 1 9 do not further teach over claims 1 0 - 1 3 as 
addressed above. 

As per claim 55 - 60, claims 55 - 60 do not further teach over claims 10 - 13 as 
addressed above. 

7. Claims 30 - 32, 42 - 44, 66 - 68 and 70 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Farber et al. (hereinafter, Tarber'' - PN: US 6415280 B1 ), in 
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view of Brothers (hereinafter, "Brothers" - PN: US 2002/0083178), in view of Rosenthal 
(hereinafter, "Rosenthal " - PN: 5359659), and in view of Malcolm et al. (hereinafter, 
"Malcolm" - PN: 2002/0004917). 

As per claim 30, 42 and 66, Farber as modified does not teach the integrity 
verification component: formulates a descriptor corresponding to the resource; 
compares the formulated descriptor with a cached descriptor, the cached descriptor 
corresponding to the resource and formulated when the resource is initially requested; 
and determines that the resource is not a security risk if the formulated descriptor and 
the cached descriptor are equivalent (Farber: Column 12 Line 38 - 43, Column 3 Line 
56 - 57, Column 39 Line 24 - 25 and Figure 1(b): Farber teaches that a "True Name" of 
a data item (for example, files, database records and the like) obtained by computing a 
MD, or a hash function, is virtually guaranteed to represent the given data item and only 
that particular data item. Therefore, a True Name is qualified as a Descriptor and both 
of them are served as resource unique identifiers; especially, for object integrity 
validation purpose - This matches the Descriptor defined by the Applicant which can be 
a hash function of the resource, a calculated checksum (CRC) or any other functional 
identifier that can be formulated to provide a basis for comparison of different 
instantiations of a resource). However, Farber does not disclose expressly the "cache 
descriptor". 

Malcolm teaches cache descriptor (Malcolm: Para [0037], Para [0052] Line 1 -2, 
Para [0054] Line 1 - 2, Para [0059] Line 10 and Para [0080] Line 1 - 3). 
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It would have been obvious to a person of ordinary skill in the art at the time the 
invention was made to combine the teaching of Malcolm within the system of Farber as 
modified because Malcolm teaches providing a cache engine to improve performance 
that allows the client devices relatively quicker access to network objects (Malcolm: see 
for example, Para [0036] and Para [0037]). 

Accordingly, Farber as modified further teaches: 

the integrity verification component: formulates a descriptor corresponding to the 
resource; compares the formulated descriptor with a cached descriptor, the cached 
descriptor corresponding to the resource and formulated when the resource is initially 
requested; and determines that the resource is not a security risk if the formulated 
descriptor and the cached descriptor are equivalent. 

As per claim 31 , 43 and 67, the claim limitations are met as the same reasons as 
that set forth in the paragraph above regarding to claim 30, 42 and 66 with the 
exception of the feature if the formulated descriptor and the cached descriptor are not 
equivalent, formulates a second descriptor corresponding to an original resource 
maintained on a file server remotely located from the network server, the resource being 
replicated from the original resource; compares the formulated descriptor with the 
second descriptor (Farber: Column 12 Line 38 - 43; Malcolm: Para [0042] and Para 
[0105]: Malcolm teaches replacing a network object associated with a mirror site with 
the original resource object (if modified), all the way up following the tree structure to the 
root object (Para [0105]) and formulating the second descriptor is evidently the only way 
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to detect the changes of objects in conjunction with the tree structure to the root object 
of the original resource as taught by Farber in view of Malcolm).; and determines that 
the resource is not a security risk if the formulated descriptor and the second descriptor 
are equivalent (Farber: Column 31 Line 26 - 30 and Column 34 Line 45 - 62: Farber 
teaches integrity checked for security purpose, for instance, to check for virus). 

As per claim 32, 44 and 68, the claim limitations are met as the same reasons as 
that set forth in the paragraph above regarding to claim 31 , 43 and 67with the exception 
of the feature if the formulated descriptor and the second descriptor are not equivalent, 
initiates that the resource stored on the network server be replaced with a copy of the 
original resource maintained on the file server; and initiates that the cached descriptor 
be replaced with the second descriptor (Farber: Column 25 Line 57 - 61 and Column 37 
Line 13-17; Malcolm: Para [0037], Para [0052] Line 1 - 2, Para [0054] Line 1 - 2, Para 
[0059] Line 10 and Para [0080] Line 1 - 3: the resource is replaced according to the 
resource tree structure and thereby the object descriptor is also replaced accordingly for 
quicker access (Para [0037])). 

As per claim 70, the claim recites computer-readable medium comprising 
computer executable instructions that, when executed, direct a computing system to 
perform the method of claim 68. It would have been obvious to a person of ordinary 
skill in the art at the time the invention was made to select a computing device to serve 
this purpose (Farber: Figure 1(a)). 
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Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Longbit Chai whose telephone number is 571-272-3788. 
The examiner can normally be reached on Monday-Friday 8:00am-4:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz R. Sheikh can be reached on 571-272-3795. The fax phone number 
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